DATA SHEET

Zero Sign-On:
The Solution for Passwordless Authentication
Key Benefits of ZSO
Reduce the risk of data breaches
By eliminating passwords, ZSO reduces the risk ofphishing and data breaches.

Provide frictionless access
ZSO eliminates the need for users to memorize,

It’s time to say goodbye to passwords
Everyone hates passwords. Not only are they hard toremember, time-consuming to enter, and annoying toreset, they are also a top source of enterprise cloud databreaches.1 It’s no surprise that 86% of security leaders
want to get rid of passwords, preferably by using mobiledevices as the enterprise ID.2

enter or reset complex passwords and enables

That’s why Ivanti introduced Zero Sign-On (ZSO), athem to access cloud-based apps and PM and Mac

simple authentication capability that replaces passwords

desktops/laptops quickly and easily.

with secure mobile devices as the user identity. By

Decrease helpdesk costs
ZSO’s passwordless approach means no helpdesk
resources are spent dealing with password resets
and account lockouts.

Deploy scalable mobile-cloud security
ZSO is built on industry standards like FIDO2
and can be used to log into online and offline PC
and Mac desktops/laptops, plus applications andenterprise cloud services on any managed or
unmanaged device, anywhere in the world.

leveraging our zero trust security framework, ZSO
enables organizations in the Everywhere Workplace to:■ Transition towards a zero trust architecture by

replacing passwords with multi-factor authentication(MFA) methods.
■ Provide passwordless access to any business app or

cloud service, including Microsoft 365.
■ Deliver a consumer-like authentication experience tothe enterprise through the use of strong biometrics.

■ Eliminate the hassle and security risks ofpasswords.
■ Ensure that only verified users, devices, apps andnetworks can access business resources.

Our unique approach
Ivanti ZSO – a component of the Ivanti Accessplatform – replaces passwords with mobile devices as
the user’s identity and primary factor for authentication.
ZSO eliminates the need for passwords through its useof strong FIDO2 authentication protocols.
Ivanti Access is built for the Everywhere Workplace. It
leverages unified endpoint management (UEM) as its
foundation – whether Ivanti UEM or third-party UEM
systems such as SCCM and Jamf – to provide a zerotrust security approach that verifies every user, device,
application and network before granting secure accessto cloud resources.

Ivanti Access also integrates seamlessly with IvantiStandards-based security

Mobile Threat Defense (MTD) to provide companies

Ivanti ZSO supports FIDO2, SAML and WS-Fed

with an added layer of security on user devices,

protocols for simple and strong authentication foralong with context-aware, conditional access for thedesktop/laptop and mobile login, and seamlesscloud. MTD can detect and remediate device, app and

SSO via certificates to SaaS-based and web-based

network threats before they can compromise businessapplications.

data.

Ivanti Access secures any cloud or federated service

MTD to determine a device’s health and whether it isincluding Microsoft 365, Google Workspace andfree from mobile threats. If a threat is detected, Ivanti

Salesforce. It also integrates with many identity

Access can revoke the end user’s session token andsolutions including those from Okta, Ping andblock the device from accessing corporate resources

Microsoft.

mobile threats.

ZSO capabilities
Mobile device as user identity
Replace passwords with secure mobile devices as theprimary factor for user authentication.
Adaptive authentication
Use our MFA capabilities to provide an additional layerof user verification for high-risk environments.
Secure any device – managed or not
ZSO works across all Android, iOS, macOS, andWindows 10 and 11 devices. Users are authenticatedusing public key credentials (certificates) on managed

1 800 982 2130

Support for common business apps and IDPs

Further, Ivanti Access and ZSO work with UEM anduntil it returns to a compliant state, again free fromivanti.com
sales@ivanti.com

Offline login
Users can log into desktops and laptops with mobiledevices when offline using ZSO over Bluetooth.
Zero trust policy engine
Using a single console, you can define policies for
all cloud apps that either block or limit access tounauthorized users, devices and apps over unsecure
networks or when threats are detected. Intuitive
remediation workflows help users self-remediate.
In-depth reporting
Our global authentication dashboard provides an indepth view of users, apps and devices that connect
to business services, alerts admins about policy
violations, and much more.

devices – whether managed via Ivanti UEM or thirdparty UEM solutions such as SCCM and Jamf – andwith FIDO security keys or QR codes paired withbiometrics on unmanaged devices.
Copyright © 2022, Ivanti. All rights reserved. IVI-2532 7/15 JD

1.

Verizon, “2021 Data Breach Investigations Report.”
https://www.verizon.com/business/resources/reports/
dbir/2021/masters-guide/
2. IDG Research, “Say Goodbye to Passwords,” April 2019.
www.mobileiron.com/sites/default/files/Whitepapers/SayGoodbye-to-Passwords/Say-Goodbye-to-Passwords.pdf